Agbor Etengeneng

IT Risk, Compliance and Vulnerability Specialist @Henry Ford Health

US

Conducted mock security audits based on ISO 27001 and NIST frameworks to identify potential compliance gaps.•Supported organizations in developing security policies aligned with industry best practices.•Evaluated third-party vendors\' security controls, ensuring compliance with NIST and SOC2 requirements.•Created and presented risk reports to stakeholders, translating technical risks into business impacts.•Supported HITRUST CSF audits and compliance initiatives, ensuring the organization met all security control requirements for certification.•Evaluated the design and operational effectiveness of Business/IT operations against the HITRUST CSF and identified areas of improvement.•Learned company functions and processes through process walkthroughs to ensure security best practices.•Analyzed root causes of security issues, provided recommendations for process improvements and risk mitigation based on assessment findings.•Collaborated with cross-functional teams to mitigate risks and ensure compliance with HITRUST CSF.•Delivered effective and concise documentation that meets HITRUST quality standards.•Prepared and provided reporting such as dashboards and metrics on various areas of performance, issue analysis•Utilized GRC tools like Archer to effectively manage assessment remediation plans and documentation.•Supported internal and external IT audits, gathering security evidence, preparing documentation, and responding to auditor inquiries.•Conducted third-party vendor risk assessments, ensuring compliance with security policies and regulatory requirements.•Assisted in the development and enforcement of IT security policies, procedures, and controls aligned with HITRUST and HIPAA frameworks.•Created table top exercises and trainings to help build users awareness within the organization